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Description 

[0001 ] This invention relates to a digital signal receiv- 
ing apparatus, and is applicable, for example, to a digital 
signal transmitting system which provides fee-charged 5 
software information to contract users. 
[0002] In a previously proposed digital signal trans- 
mitting system using satellites or cables, as shown in 
Fig. 1, a program source PS, input to a digital signal 
transmitting apparatus, i.e., a broadcasting station 1 , is io 
band-compression coded with a moving picture image 
coding experts group (MPEG) method by means of an 
MPEG encoder 2 and is converted to packet transmis- 
sion data by means of a packet generation section 3. 
[0003] The packetized transmission data is multi- 15 
plexed by a multiplexer 4, then the transmission data is 
scrambled for security by an encryption processing sec- 
tion 5, and finally keys (ciphers) are put over the scram- 
bled data many times so that the scrambling cannot be 
descrambled easily. The encrypted transmission data is 20 
error corrected by a forward error correction (FEC) sec- 
tion 6 and modulated by a modulator 7. The modulated 
data is then sent through a digital satellite 8 directly to 
a digital signal receiving apparatus installed in acontract 
user's household, i.e., a terminal 10 (Fig. 2), or sent 25 
through the digital satellite 8 to a signal distributing sta- 
tion 9 (Fig. 2) which is called a head end. The data, 
transmitted to the signal distributing station 9, is sent to 
the terminal 1 0 via cable. 

[0004] Now, as shown in Fig. 2, in the terminal 10, 30 
when the transmission data is directly sent via the sat- 
ellite 8, the data is received by an antenna 11 and sent 
to a front end section 12. When the transmission data 
is sent from the signal distributing station 9 via the cable, 
it is inputted directly to the front end section 12. A user 35 
contracting with the broadcasting station 1 accesses a 
key authorized to each user to the terminal 1 0, with re- 
spect to the transmission data sent directly from the sat- 
ellite 8 or from the satellite 8 via the signal distributing 
station 9, so that the user is authorized as a contract 40 
user and bill processing is performed, and at the same 
time, the user can appreciate desired software informa- 
tion. 

[0005] That is, in the terminal 1 0, the transmission da- 
ta is processed by the front end section 12 comprising ^5 
a tuner, a demodulator, and an error corrector, and the 
processed data is input to a data fetch section 13. In the 
data fetch section 13, the multiplexed data is demulti- 
plexed by the demultiplexer 14 so that the data is sep- 
arated into an video signal, an audio signal, and data 50 
other than these signals. In a decryption section 15, ci- 
phers are decrypted while performing bill processing. In 
a packet separation section 16, the decrypted data is 
packet separated. Finally, the compression of the data 
is expanded by an M PEG decoder 1 7, and the video and 55 
audio signals, which are digital-to-analog converted to 
analog signals, are output to television. 
[0006] Incidentally, in the digital signal transmission 



system, when fee-charged software information such as 
video on demand or near video on demand is transmit- 
ted, a digital storage 1 8 such as tape media or disk me- 
dia is incorporated into or connected to the terminal 10 
to meet the convenience of users and to effectively uti- 
lize a digital transmission path. In such a case, large 
amounts of software data have been downloaded to the 
storage 18 by making use of an unoccupied time band 
and an unoccupied transmission path, and when the us- 
er looks at the software information near at hand, the 
user accesses it with an ID card (for example, smart 
card) 19 to perform bill processing, and reproduction 
limitation is lifted. 

[0007] More specifically, if the user accesses a central 
processing unit (CPU) 20 by means of the smart card 
1 9, the CPU 20 performs an inquiry of registration to an 
authorization center 22 (Fig. 1) through a modem 21. 
The authorization center 22 confirms registration by 
means of a conditional access 23. If registration is con- 
firmed, the authorization center 22 performs bill 
processing and also performs notification of confirma- 
tion to the CPU 20 through the modem 21 . 
[0008] The CPU 20 instructs decryption of key to a 
local conditional access 24 by this notification, and the 
local conditional access 24 decrypts a cipher which has 
been put over the data recorded on the storage 18. 
Hence, the reproduction limitation is lifted, and the pack- 
et of the data recorded on the storage 18 is separated 
by the packet separation section 16. The compression 
of the packet-separated data is decompressed (expand- 
ed) by the MPEG decoder 17 and then the expanded 
data is digital-to-analog converted to be output to tele- 
vision as the analog signal and audio signal A/V. 
[0009] However, if, in the security system in a current 
broadcasting form, software information has been 
downloaded to the storage 18, as described above, to 
try to realize a system where this software can be ap- 
preciated when user wants to see it, then the following 
problems will arise. 

[0010] More specifically, in the current digital signal 
transmitting system, when a cipher is decrypted by the 
decrypting section 15 and then software information is 
downloaded to the storage 18, as shown by point A in 
Fig. 3, fee-charged software cannot be downloaded to 
the storage 18 by decrypting the cipher without billing, 
because decrypting a cipher is, i.e., billing. Now, if only 
billing information is made free, all ciphers of data are 
decrypted, and downloaded to the storage 18, then a 
piece of software information is passed as it is and out- 
put from the terminal 1 0. 

[0011] Also, in a case where the storage 1 8 is not in- 
corporated into the terminal 10 but is connected to the 
terminal 10 and switching means is not provided be- 
tween the decryption section 1 5 and the packet separa- 
tion section 16, if ciphers are all decrypted and down- 
loaded to the storage 1 8, then the decrypted data are 
all sent and there is the possibility that they can been 
seen for free at point C of Fig. 3 by persons other than 



2 



3 



EP 0 710 025 B1 



4 



contract users. 

[0012] To solve these problems, data can be down- 
loaded to the storage 18 before ciphers are decrypted, 
i.e., after multiplex is demultiplexed by the demultiplexer 
14 (point B of Fig. 3). If, however, data are downloaded 5 
to the storage 1 8 after multiplex is demultiplexed by the 
demultiplexer 14, there is the problem that intra-coded 
(I) pictures can not be pulled out and can not be repro- 
duced at variable speed, because data remain encrypt- 
ed. 10 
[0013] Also, in broadcasting systems where data are 
encrypted, keys are changed annually or biennially to 
ensure security. Therefore, when a key is changed after 
software information is downloaded to the storage 1 8, 
there is the problem that ciphers cannot be decrypted 15 
and therefore the downloaded software information can- 
not be seen. 

[0014] International Patent Application Publication 
No. WO 94/10802 relates to the transmission of com- 
pressed digital signals and discloses the use of double 20 
signal encryption. 

[0015] European Patent Application Publication No. 
EP-A-0 506 435 relates to the transmission of B-MAC 
television signals in which a programme signal is scram- 
bled with a key and the key is twice encrypted and mul- 25 
tiplexed with the scrambled programme signal. 
[001 6] According to the present invention there is pro- 
vided digital signal receiving apparatus for receiving a 
digital signal broadcast by a broadcasting station and 
formed by compressing first and second digital signals, 30 
encrypting the compressed first digital signal with a first 
encryption key, multiplexing the encrypted compressed 
first digital signal and the compressed second digital sig- 
nal, and encrypting the multiplexed first and second dig- 
ital signals with a second encryption key, said receiving 35 
apparatus comprising: 

first-decryption means for decrypting said digital 
broadcast signal encrypted with said second en- 
cryption key; 40 
means for recording the first-decrypted digital 
broadcast signal, which remains encrypted with 
said first encryption key, on a recording medium; 
second-decryption means for decrypting the re- 
corded first-decrypted digital broadcast signal en- ^5 
crypted with said first encryption key; and 
authorization/billing means that is operative to com- 
municate with an authorization center to authorize 
said decryption by said second-decryption means 
when a user desires such decryption and to cause 50 
bill processing for such decryption to be performed. 

[0017] A preferred form of implementation of the in- 
vention provides a digital signal receiving apparatus 
which is capable of ensuring security when fee-charged 55 
software information is transmitted. 
[0018] The preferred form of implementation is de- 
scribed in detail below with reference to the accompa- 



nying drawings. First, however, it will be described in 
outline. 

[0019] When an image providing predetermined serv- 
ices is transmitted, a band-compression coded first dig- 
ital video signal is given first-encryption processing, and 
then the encrypted compressed first signal is multi- 
plexed with a second compressed digital signal and the 
multiplexed signal is further given encryption processing 
and transmitted. Therefore, double security can be add- 
ed to the video signal so that a digital signal transmitting 
method where its security is more firmly ensured can be 
realized. 

[0020] Further, in the preferred form of implementa- 
tion, variable-speed reproduction image can be viewed 
without performing variable-speed reproduction 
processing at a receiving terminal. 
[0021] The invention will now be further described, by 
way of illustrative and non-limiting example, with refer- 
ence to the accompanying drawings, in which like parts 
are designated by like reference numerals or charac- 
ters, and in which: 

Fig. 1 is a block diagram showing the structure of a 
previously proposed digital signal transmitting ap- 
paratus; 

Fig. 2 is a block diagram showing the structure of a 
previously proposed digital signal receiving appa- 
ratus; 

Fig. 3 is a block diagram explaining problems oc- 
curring when, in the previously proposed digital sig- 
nal receiving apparatus, software information is 
downloaded; 

Fig. 4 is a block diagram showing the structure of a 
digital signal transmitting apparatus useful for the 
understanding of the invention; 
Fig. 5 is a block diagram showing the structure of a 
digital signal receiving apparatus according to an 
embodiment of the invention; 
Fig. 6 is a block diagram showing the detailed struc- 
ture of a sending section of the digital signal trans- 
mitting apparatus useful for the understanding of 
the invention; 

Fig. 7 is a block diagram showing the detailed struc- 
ture of a software supply section of the digital signal 
transmitting apparatus useful for the understanding 
of the invention; 

Fig. 8 is a block diagram showing the detailed struc- 
ture of a receiving section of the digital signal re- 
ceiving apparatus according to the embodiment of 
the invention; 

Fig. 9 is a block diagram showing the detailed struc- 
ture of a recording/reproducing section of the digital 
signal receiving apparatus according to the embod- 
iment of the invention; 

Fig. 10 is a block diagram showing the schematic 
structure of a digital signal transmitting system of 
the embodiment; and 

Fig. 1 1 is a block diagram explaining a software sup- 
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ply system of a package system. 

[0022] Preferred embodiments of this invention will 
now be described with reference to the accompanying 
drawings: 

(1) Structure of Digital Signal Transmitting Apparatus 
and Digital Signal Receiving Apparatus 

[0023] In Fig. 4, where the same reference numerals 
are applied to parts corresponding with Fig. 1 , reference 
numeral 30 denotes a digital signal transmitting appa- 
ratus according useful for the understanding of the in- 
vention. In the digital signal transmitting apparatus 30, 
i.e., a broadcasting station, when predetermined serv- 
ices, for example, fee-charged software data are trans- 
mitted, twofold security is ensured by putting a cipher of 
a storage system over software data and further putting 
a cipher of a broadcasting system over the software da- 
ta. 

[0024] The digital signal transmitting apparatus 30 is 
constituted by a digital signal sending section 31 and a 
software supply section 32. In the digital signal transmit- 
ting apparatus 30, when fee-charged software informa- 
tion, for example, image software, music software, elec- 
tronic program list, shopping information, game soft- 
ware, or education information is requested by users, 
as shown in Fig. 4, the software information as a pro- 
gram source PS2 is input to the software supply section 
32. 

[0025] I n the software supply section 32, the software 
data PS2 comprising a digital signal is band-compres- 
sion coded by means of an MPEG encoder 33. The 
band-compression coded digital signal is input to a 
packet generation section 34 and a trick play processing 
section 35. In the trick play processing section 35, var- 
iable-speed reproduction processing, i.e., processing 
for extracting an intra-coded (I) picture is performed for 
the video data. The extracted I picture is output to a mul- 
tiplexer 36. Note that a technique for variable-speed re- 
producing an image which has been band-compression 
coded by an MPEG method is disclosed in Japanese 
Patent Application No. 287702/1993. 
[0026] In the packet generation section 34, the input 
digital signal is packetized to video data, audio data, and 
other data. These packetized data are multiplexed by a 
multiplexer 36. In the multiplexer 36, an I picture is bur- 
ied in the video data. A cipher of a storage system is put 
over the multiplexed digital signal by an encryption 
processing section 37, and the encrypted signal is sent 
to a multiplexer 4 of a rear sending section 31 . 
[0027] In the multiplexer 4, digital signals over which 
the ciphers of storage system were put are multiplexed. 
In an encryption processing section 5, a cipher of a 
broadcasting system is put over this multiplexed digital 
signal. Therefore, a cipher of a storage system and a 
cipher of a broadcasting system are put over the digital 
signal sent from the digital signal transmitting apparatus 



30 in duplicate. In the sending section 31 , key data that 
are added to programs are all common and broadcast- 
ing billing data is charge free. 

[0028] This double security added digital signal is sent 
5 to aterminal installed in a household, i.e., adigital signal 
receiving apparatus 40 directly from a satellite 8 or by 
way of a signal distributing station 9 from the satellite 8, 
as shown in Fig. 5, where the same reference numerals 
are applied to corresponding parts with Fig. 2. In the dig- 
10 ital signal receiving apparatus 40, the cipher of the 
broadcasting system, put over the transmitted digital 
signal, is decrypted by accessing a smart card 19, and 
the digital signal can be downloaded to a digital storage 
41 . That is, the cipher of the broadcasting system of the 
15 transmitted digital signal is decrypted by the decrypting 
section 15 and then the digital signal is recorded on the 
digital storage 41 . 

[0029] In this case, the digital signal which is down- 
loaded to the digital storage 41 is recorded in the state 

20 where only the cipher of the storage system has been 
put over and also recorded in the state where variable- 
speed reproduction processing has been performed. 
Therefore, even if the key of the broadcasting system, 
added by the sending section 31, were changed, there 

25 would be no influence. Also, no image is viewed free of 
cost because the cipher of the storage system has been 
put over at point C of Fig. 5. 

[0030] When a user desires to see the software infor- 
mation PS2 downloaded to the storage 41, a CPU 42 

30 performs an inquiry of registration to an authorization 
center 44 (Fig. 4) for software information through a mo- 
dem 43, by inputting an ID number registered independ- 
ently of the broadcasting system (for example, on the 
screen of a personal computer, put an ID number). The 

35 CPU 42 usually performs an inquiry of registration to a 
broadcasting-system authorization center 22 for the 
contract program PS^ and performs an inquiry of regis- 
tration to the software-system authorization center 44 
for the software information PS2. That is, the CPU 42 

40 constructs two independent billing systems, a billing 
system for a broadcasting system and a billing system 
for a software system, by controlling the share of the 
modem 43. 

[0031] The authorization center 44 sends the ID 
45 number to the conditional access 45 (Fig. 4) of the soft- 
ware supply section 32 and confirms registration. If the 
authorization center 44 confirms registration, then bill 
processing is performed and the CPU 42 instructs a lo- 
cal conditional access 46 to decrypt a cipher. The local 
50 conditional access 46 has a function of decrypting the 
cipher of the software system. Hence, the reproduction 
limitation of the storage 41 is lifted and the cipher is de- 
crypted, so that the user is able to see software infor- 
mation by the same manipulation as a normal video tape 
55 recorder (VTR). 



4 



7 



EP 0 710 025 B1 



8 



(2) Structure of Digital Signal Transmitting Apparatus 
useful for the understanding of the invention. 

[0032] The detailed constructions of a sending sec- 
tion 31 and a software supply section 32 of a digital sig- 
nal transmitting apparatus useful for the understanding 
of the present invention are shown in Figs. 6 and 7, re- 
spectively. In this digital signal transmitting apparatus 
30, when a normal contract program PS^ is supplied, 
the program source PS-, is input directly to the sending 
section 31 , and when fee-charged software information 
PS2 is supplied, the fee-charged software information 
PS2 is supplied to the sending section 31 through the 
software supply section 32. 

[0033] For the appreciation of the program PS^, the 
video signal and the audio signal of a program, which is 
supplied, for example, from a digital VTR 47, are band- 
compression coded by means of MPEG encoders 2A 
and 2B and then are packetized for each video data and 
for each audio data by means of packet generation sec- 
tions 3A and 3B. The packetized video data and audio 
data are sent to a multiplexer 4 via a data bus 48. At the 
same time as this, for example, a personal computer 49 
(hereinafter referred to as a "PC") sends data other than 
video data and audio data to a packet generation section 
3C through a data interface (data l/F) 50 to be pack- 
etized. The packetized data from the packet generation 
section 3C is then sent through the data bus 48 to the 
multiplexer 4. 

[0034] Also, a conditional access 23 sends key data 
through a data l/F 51 to a packet generation section 3D 
to packetize it, and the packet key data from the packet 
generation section 3D is sent through the data bus 48 
to the multiplexer 4. The conditional access 23 further 
sends key information for encrypting software data to 
an encryption processing section 5. In the multiplexer 4, 
the video data, the audio data, and other data are mul- 
tiplexed. The encryption processing section 5 puts a ci- 
pher over this multiplexed data, based on the key infor- 
mation input from the conditional access 23. The en- 
crypted data is error corrected by a FEC section 6. The 
error-corrected data is modulated by a modulator 7 and 
then transmitted to a satellite 8 via an up-converter 52. 
[0035] When, on the other hand, fee-charged soft- 
ware information PS2 is transmitted, the video signal 
and the audio signal of the software information PS2 
which is output, for example, from a digital VTR 53 are 
band-compression coded by means of MPEG encoders 
33A and 33B, respectively. The band-compression cod- 
ed video signal is input to a packet generation section 
34A and a trick play processing section 35. The packet 
generation section 34A packetizes the input video sig- 
nal. The trick play processing section 35 extracts an I 
picture from the input video signal and then outputs the 
I picture to a multiplexer 36. 

[0036] The band-compression coded audio signal is 
input to a packet generation section 348, which pack- 
etizes the audio signal. Also, general data other than 



video data and audio data, input from the PC 54, is input 
through a data l/F 55 a packet generation section 34C. 
In addition, the conditional access 45 sends key data to 
a packet generation section 34D through a data l/F 56 

5 and also sends key information for storage system to 
the encryption processing section 37. 
[0037] The packetized data from the packet genera- 
tion sections 34A to 34D are multiplexed by the multi- 
plexer 36 through the data bus 57 and also the I picture 

10 is buried in video data. An encryption processing section 
37 encrypts the multiplexed data, based on the key in- 
formation input from the conditional access 45, and out- 
puts the encrypted data to the packet generation section 
3E of the sending section 31 through a data l/F 58 (Fig. 

15 6). The packetized data from the packet generation sec- 
tion 3E is sent through the data bus 48 to the multiplexer 
4 to be multiplexed, and then sent to the encryption 
processing section 5. In the encryption processing sec- 
tion 5, a cipher of the broadcasting system is put over 

20 the multiplexed data. The encrypted data is processed 
by the FEC section 6, the modulator 7, and the up-con- 
verter 52. The thus processed data is transmitted to the 
terminal 40 directly from the satellite 8 or by way of the 
signal distributing station 9 from the satellite 8. 

25 

(3) Structure of Digital Signal Receiving Apparatus 
according to an Embodiment 

[0038] As shown in Figs. 8 and 9 where the same ref- 
30 erence numerals are applied to corresponding parts 
with Fig. 5, the digital signal receiving apparatus 40 ac- 
cording to an embodiment of the present invention is 
constituted by a receiving section 60 (Fig. 8) for receiv- 
ing a digital signal which is sent by the digital signal 
35 transmitting apparatus 30 and a recording/reproducing 
section 61 (Fig. 9) for recording and reproducing the sig- 
nal received by the receiving section 60 on and from a 
recording medium. In this embodiment, the receiving 
section 60 and the recording/reproducing section 61 are 
40 interconnected by way of digital interfaces (digital l/F) 
62 and 63. 

[0039] In the receiving section 60, the digital signal 
which is transmitted directly from the satellite 8 or by 
way of the signal distributing station 9 from the satellite 

45 8 is input to a tuner 1 2A as a compressed digital signal. 
The tuned digital signal is demodulated by a demodula- 
tor 1 2B and error corrected by an FEC section 1 2C. The 
error-corrected signal is then input to a decrypting block 
comprising a demultiplexer 14 and a decrypting section 

50 15. In the decrypting block, the cipher of the broadcast- 
ing system is decrypted with a private key which only a 
registered user can have. 

[0040] The general data where the cipher of the 
broadcasting system was decrypted and the video data 
55 where a plurality of program channels were time-divi- 
sion multiplexed at units of packet of predetermined byte 
length are sent to a packet separation section 1 6 or the 
recording/reproducing section 61. A path leading to the 
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packet separation section 16 and a patli leading to tine 
recording/reproducing section 61 are switclied by 
switcliing means (not sliown). In this embodiment, the 
switching means has been switched to the recording/ 
reproducing section 61. The general data used herein 
includes text data, font data, video data, graphic data, 
and moving picture video data for administering a user's 
interface on a TV monitor. 

[0041] The general data is input through a data port 
to a CPU block 64 which performs interactive process- 
ing. The CPU block 64 comprises a main CPU 42, an 
electrically erasable programmable read only memory 
(EEPROM) 65, a modem interface (modem l/F) 66, a 
modem 43, a video random access memory (VRAM) 67, 
a graphic processor unit (GPU) 68, a read only memory 
(ROM) 69, and a dynamic random access memory 
(DRAM) 70. In the case of hard-disk incorporated sys- 
tems, general data is stored through a CPU bus in a hard 
disk once. The CPU 42 processes these general data 
in accordance with instructions externally manipulated 
by a controller, and necessary display data is output. 
[0042] On the other hand, the video data is input 
through the digital l/F 62 and the digital l/F 63 to the 
recording/reproducing section 61 and then the video da- 
ta is packetized and separated by a packet separation 
section 71 . The packetized separated data is given time 
base corrector (TBC) processing and the format is con- 
verted by a format converting section 72. The format 
converted data is error corrected and modulated by way 
of a local conditional access 46. The modulated data is 
then recorded on the recording medium of a mechanical 
deck 74 by means of a record/reproduction processing 
section 73. Note that both of tapes and disks can be 
used as a recording medium. For example, there are 
digital VCRs, digital video disks (DVD), hard disks, and 
mini-floppy disks. 

[0043] If a user instructs reproduction, a command is 
input from the CPU 42 through the digital l/F 62 and the 
digital l/F 63 to a VCR controller 75. The VCR controller 
75, based on this command, drives the mechanical deck 
74 by a driver 76. Thereby, a search is made up to a 
desired absolute address on the recording medium and 
a tracking operation is performed by an automatic track- 
ing following (ATF) 77. As a result, data, recorded on 
the recording medium, is reproduced by the record/re- 
production processing section 73. Note that the abso- 
lute address may be added in advance to transmission 
data, or may be added within the digital signal receiving 
apparatus 40. 

[0044] The reproduction signal, reproduced by the 
record/reproduction processing section 73, is demodu- 
lated and then the cipher of the storage system is de- 
crypted by the local conditional access 46. The decrypt- 
ed reproduction signal is error corrected and the format 
is converted by the format converting section 72. The 
format converted reproduction signal is packetized by 
the packet generation section 78 and is sent through the 
digital l/F 63 and the digital l/F 62 to the packet separa- 



tion section 1 6, in which the packet is separated. For the 
packet separated reproduction signal, the compression 
of the audio signal and the compression of the video sig- 
nal are decompressed by an MPEG audio decoder 1 7A 

5 and an MPEG image decoder 17B, respectively. 

[0045] The decompressed audio signal is converted 
to an analog signal by a digital-to-analog converter 
(DAC) 79 and is output. The decompressed video signal 
is encoded by a national television system committee 

10 (NTSC) encoder 80. Also, general data on a user inter- 
face is input from the CPU block 64 to an NTSC encoder 
81 . The general data, encoded with the aforementioned 
encoder 81 , is added to the video signal which is output 
from the encoder 80, and the general data is output. 

15 [0046] In a case where in the foregoing structure the 
software information PS2 is transmitted to the digital sig- 
nal receiving apparatus 40, in the software supply sec- 
tion 31, a cipher of a software system is put over the 
software information PS2 and then in the sending sec- 

20 tion 32 a cipher of a broadcasting system is put over, 
and with this double security ensured, the software in- 
formation is transmitted to the digital signal receiving ap- 
paratus 40. In the digital signal receiving apparatus 40, 
the cipher of the broadcasting system is decrypted and 

25 then the software information PS2 is recorded on the 
digital storage 41 . When a user sees the software infor- 
mation PS2 recorded on the digital storage 41 , registra- 
tion is confirmed by the authorization center 44. If reg- 
istration is confirmed, the cipher of the software system 

30 is decrypted and the software information PS2 can be 
seen. 

[0047] According to the foregoing structure, the key 
data of the broadcasting system are rendered all com- 
mon and also the billing data by broadcasting is ren- 

35 dered free, and the software information PS2 over which 
a cipher of the broadcasting system and a cipher of the 
software system are put in duplicate is transmitted when 
the software information PS2 is supplied to the digital 
signal receiving apparatus 40. In the digital signal re- 

40 ceiving apparatus 40, the cipher of the broadcasting 
system is decrypted and then the software information 
PS2 is downloaded on the digital storage 41 . Therefore, 
security can be ensured because the cipher of the soft- 
ware system has been put over the software information 

45 PS2 when downloading the software information PS2 to 
the digital storage 41 . 

[0048] Also, according to the above-mentioned struc- 
ture, the switching means, which switches the path lead- 
ing to the packet separation section 16 and the path 

50 leading to the recording/reproducing section 61 , is pro- 
vided, so that a digital signal transmitting system having 
both of the advantages of a video on demand and the 
advantages of a VTR can be provided to contract users. 
[0049] Also, according to the above-mentioned struc- 

55 ture, the software information PS2 is given variable- 
speed reproduction processing in the software supply 
section 32 and then transmitted to the digital signal re- 
ceiving apparatus 40, so that contract users are able to 
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reproduce the software information PS2 recorded on tine 
storage 41 at variable speed. 

[0050] Also, according to the above-mentioned struc- 
ture, users are able to see, among a plurality of pieces 
of software information PS2 downloaded, only desired 5 
software information at a desired time because a plural- 
ity of pieces of fee-charged software information PS2 
can be downloaded to the storage 41 of the terminal 40 
by making use of an unoccupied time band of a trans- 
mission path and an unoccupied transmission path. In 10 
other words, each time software information PS2 de- 
sired is selected, bill processing is performed and the 
reproduction limitation of the storage 41 is lifted. This 
embodiment is also effective as a means for realizing 
the video on demand in a digital signal transmitting sys- 15 
tem which is not 1 :1 as in the case of transmission by 
satellite. 

[0051 ] Also, according to the above-mentioned struc- 
ture, the switching between the access to the authori- 
zation center 22 managing the billing information on the 20 
normal contract programs PS-, and the access to the au- 
thorization center 44 managing the billing information on 
the software information PS2 is controlled by way of the 
modem 43, so that two independent billing systems, a 
billing system for a broadcasting system and a billing 25 
system for a software system, can be constructed. 

(4) Structure of Digital Signal Transmitting System 

[0052] In Fig. 1 0 where the same reference numerals 30 
are applied to corresponding parts with Figs. 4 and 5, 
reference numeral 90 denotes the schematic construc- 
tion of a digital signal transmitting system of another em- 
bodiment of the present invention. In the digital signal 
transmitting system 90, twofold security is ensured 35 
when predetermined services, for example, fee- 
charged software information PS2 is transmitted, by 
putting a cipher of the storage system over the software 
information PS2 and further putting a cipher of the 
broadcasting system over that software information 40 
PS2. Moreover, an encryption key Km, which is used 
when the cipher of the storage system is put over, is en- 
crypted with a personal key Kp2 for software information 
use. 

[0053] When a user sees the program source PS-, ^5 
transmitted by the digital signal transmitting apparatus 
30, the user inserts the smart card 19 mailed from the 
broadcasting station 30 into the terminal 40 and inputs 
a registered ID number of broadcasting system, ID1. 
Hence, the CPU 42 performs an inquiry of registration 50 
to the authorization center 22 through the modem 43. If 
the registration of that user is confirmed, a program 
source Es (Data) over which a cipher of the broadcast- 
ing system was put is sent from the broadcasting station, 
i.e., the digital signal transmitting apparatus 30. 55 
[0054] That is, in the broadcasting station 30, when 
the program source PS-, is transmitted to the digital sig- 
nal receiving apparatus 40, in the encryption processing 



section 5, acipherof the broadcasting system is put over 
the program source PS-, by means of an encryption key 
Ks. This encryption key Ks is encrypted with a work key 
Kw, and the work key Kw is encrypted with a personal 
key Kpl of broadcasting system given to each user. 
Therefore, the encryption processing section 5 multi- 
plexes the program source Es(Data) over which a cipher 
of the broadcasting system was put, and the encryption 
key E(Ks) and the work key E(Kw), and transmits the 
multiplexed data to the digital signal receiving apparatus 
40. 

[0055] The smart card 19 includes the personal key 
Kpl which was used when encrypting the encryption 
key Km. Therefore, in the terminal 40, the cipher of the 
encrypted work key E(Kw) is decrypted by the personal 
key Kpl and the cipher of the encryption key E(Ks) is 
decrypted by the decrypted work key Kw. Moreover, with 
the decrypted encryption key Ks, the cipher of the broad- 
casting system of the program source Es(Data) is de- 
crypted. The decrypted program source PS^ is decom- 
pressed by the MPEG decoder 17 and converted to an 
analog signal. The converted analog signal is output to 
a TV set. 

[0056] When a user desires to download the software 
information PS2 to the digital storage 41 (in this case, 
the above-mentioned switching means switches each 
time information is sent to the digital storage 41), the 
user inserts the smart card 19 into the terminal 40 and 
inputs a registered ID number of broadcasting system, 
ID1 . Therefore, the CPU 42 performs an inquiry of reg- 
istration to the authorization center 22 through the mo- 
dem 43. If the registration of that user is confirmed, a 
program source Es {Em(Data)} over which a cipher of 
the broadcasting system and a cipher of the software 
system were put is sent from the broadcasting station 
30. 

[0057] That is, in the encryption processing section 37 
of the broadcasting station 30, a cipher of the storage 
system is put over the software information PS2 by 
means of an encryption key Km for software information 
use. Also, this encryption key Km is encrypted with a 
personal key Kp2 for software information use, given to 
each user. The encrypted software data Em(Data) is 
sent to the encryption processing section 5, and the en- 
crypted encryption key E(Km) is sent to the authoriza- 
tion center 44. 

[0058] In the encryption processing section 5, acipher 
of the broadcasting system is put over the software data 
Em(Data) over which a cipher of the software system 
was put, by means of the encryption key Ks. As de- 
scribed above, this encryption key Ks is encrypted with 
the work key Kw, and the work key Kw is encrypted with 
the personal key Kpl. The encryption processing sec- 
tion 5 multiplexes the software data Es{Em(Data)} over 
which the cipher of the software system and the cipher 
of the broadcasting system were put in duplicate, and 
the encryption key E(Ks) and the work key E(Kw), and 
transmits the multiplexed data to the terminal 40. 
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[0059] In the terminal 40, the cipher of the broadcast- 
ing system of the doubly encrypted software data Es{Em 
(Data)} as described above is decrypted because the 
smart card 1 9 has been inserted in the terminal 40. The 
software data Em(Data) where the cipher of the broad- 
casting system was decrypted is recorded on the digital 
storage 41 . 

[0060] When a user sees the software data Em(Data) 
recorded on the digital storage 41 , the user inserts the 
smart card 19 into the terminal 40 and inputs a regis- 
tered ID number of software system, ID2. Thereby, the 
CPU 42 performs an inquiry of registration to the author- 
ization center 44 through the modem 43. If the registra- 
tion of the user is confirmed, bill processing is per- 
formed. Then, the encryption key E(Km) is input from 
the authorization center 44 through, for example, a tel- 
ephone line and through the modem 43 to a smart card 
91, and the cipher of the encryption key E(Km) is de- 
crypted. 

[0061 ] That is, the smart card 91 includes the person- 
al key Kp2 which was used when encrypting the encryp- 
tion key Km of software system. Therefore, the cipher 
of the encryption key E(Km) is decrypted by the personal 
key Kp2. The decrypted encryption key Km is sent 
through the CPU 42 to the decryption section 46. 
[0062] In the decrypting section 46, the cipher of the 
software system, put over the software data Em(data), 
is decrypted by the encryption key Km, and the decrypt- 
ed software data is sent to an MPEG decoder 1 7. In the 
MPEG decoder 17, the decrypted software data PS2 is 
decompressed and then converted to an analog signal. 
The analog signal is then output to a TV set. 
[0063] In the foregoing structure, when the software 
information PS2 is transmitted to the digital signal re- 
ceiving apparatus 40, a cipher of the software system is 
put over the software information PS2 and then a cipher 
of the broadcasting system is put over and transmitted, 
and at the same time the encryption key Km, which was 
used when the cipher of the software system is put over, 
is encrypted with the personal key Kp2. 
[0064] In the digital signal receiving apparatus 40, the 
cipher of the broadcasting system of the software data 
Es{Em(Data)} is decrypted with the smart card 19 and 
then the decrypted software data is recorded on the dig- 
ital storage 41. When the software data Em(Data), re- 
corded on the digital storage 41, is seen, the cipher of 
the encryption key E(Km) is decrypted with the smart 
card 91 . Also, the cipher of the software system, put over 
the software data Em(Data), is decrypted with the de- 
crypted encryption key Km. 

[0065] According to the foregoing structure, when 
transmitting the software information PS2 is transmitted 
to the digital signal receiving apparatus 40, a cipher of 
the software system and a cipher of the broadcasting 
system are put over the software information PS2, and 
the encryption key Km, used when the cipher of the soft- 
ware system is put over, is encrypted with the personal 
key Kp2. Therefore, the security of the software infor- 



mation PS2 can be ensured more firmly. 
[0066] Also, according to the above-mentioned struc- 
ture, by incorporating the personal key Kp2 for decrypt- 
ing the cipher of the encrypted encryption key E(Km) 
5 into the smart card 91 , desired software information PS2 
can be seen at a desired time because users are able 
to decrypt with ease and reliability the cipher of the en- 
cryption key E(Km). 

10 (5) Other Example 

[0067] The above-mentioned embodiments have 
been dealt with the case where a contract user has 
downloaded fee-charged software information PS2 to 

15 the storage 41 and where the user sees the software 
information PS2 recorded on the digital storage 41 when 
the user desires to do so. However, the present inven- 
tion is not limited to this, but as shown as an example 
in Fig. 11, a package system 100 can be constructed 

20 with a software supply section 32 and a digital signal 
receiving apparatus 40, software information encrypted 
in the software supply section 32 is recorded on a re- 
cording medium and packaged, and this package soft- 
ware 101 can be sent to users periodically, for example, 

25 by the month. 

[0068] In this case, as shown in Fig. 11 , a billing sys- 
tem can be constructed only with the digital signal re- 
ceiving apparatus 40. Also, by cheaply providing users 
with the software package 1 01 where a plurality of piec- 

30 es of encrypted software information are recorded, there 
can be constructed a new software information supply 
system where pieces of software information are pack- 
aged, such as a system where only information that us- 
ers desire to see is billed and enjoyed. Note that the 

35 package software 101 includes, for example, ten mov- 
ies. 

[0069] Further, the above-mentioned embodiments 
have been dealt with the case where the authorization 
center 22 for a broadcasting system and the authoriza- 

40 tion center 44 for a software system are provided and 
the share of the modem 43 is controlled by means of the 
CPU 42, so that two independent billing systems are 
constructed. However, the present invention is not lim- 
ited to this, but the bill processing with respect to the 

45 programs of the broadcasting and software systems can 
be performed with a single authorization center. 
[0070] Further, the above-mentioned embodiments 
have been dealt with the case that there was used the 
digital signal receiving apparatus 40 where the record- 

50 ing/reproducing section 61 is connected to the receiving 
section 60. However, the present invention is not limited 
to this, but it can use a digital signal receiving apparatus 
40 into which the recording/reproducing section 61 is in- 
corporated. 

55 [0071] Further, the above-mentioned embodiment 
have been dealt with the case where variable-speed re- 
production processing was performed in the software 
supply section 32. However, the present invention is not 
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limited to this, but tine variable-speed reproduction 
processing can be performed in the terminal, i.e., digital 
signal receiving apparatus 40. 

[0072] Furthermore, the above-mentioned embodi- 
ment have been dealt with the case where the smart 5 
card 19 for seeing a general contract program source 
PS-i and the smart card 91 for seeing software informa- 
tion PS2 were individually provided. However, the 
present invention is not limited to this, but a single card 
can have both of the functions of the smart card 1 9 and 10 
the smart card 91 . 

[0073] Moreover, the above-mentioned embodiment 
have been dealt with the case where the software infor- 
mation PS2 was downloaded to the digital storage 41. 
However, the present invention is not limited to this, but 15 
the software information PS2 can be seen at real time. 
In such a case, the switching means is switched to the 
path leading to the packet separation section 1 6 and the 
smart cards 1 9 and 91 are inserted into the terminal 40. 
Therefore, the ciphers of broadcasting and software 20 
systems which have been put over the software infor- 
mation PS2 are decrypted, and the software information 
PS2 can be seen at real time. 

[0074] Finally, the above-mentioned embodiment 
have been dealt with the case where an audio signal 25 
and an video signal are band-compression encoded and 
then transmitted to the digital signal receiving apparatus 
40. However, the present invention is not limited to this, 
but only the video signal can be band-compression en- 
coded and transmitted to the digital signal receiving ap- 30 
paratus 40. 



Claims 

35 

1. Digital signal receiving apparatus (40; 60, 61) for 
receiving a digital signal broadcast by a broadcast- 
ing station (30) and formed by compressing (33, 2) 
first and second digital signals (PS1 , PS2), encrypt- 
ing (37) the compressed first digital signal with afirst 40 
encryption key, multiplexing (4) the encrypted com- 
pressed first digital signal and the compressed sec- 
ond digital signal, and encrypting (5) the multi- 
plexed first and second digital signals with a second 
encryption key, said receiving apparatus (40; 60, ^5 
61) comprising: 



broadcast signal encrypted with said first en- 
cryption key; and 

authorization/billing means (42, 43, 46) that is 
operative to communicate with an authorization 
center (44) to authorize said decryption by said 
second-decryption means when a user desires 
such decryption and to cause bill processing for 
such decryption to be performed. 

2. Apparatus according to claim 1, wherein said 
means for recording the first-decrypted digital 
broadcast signal comprises recording/reproducing 
means (73-77), and wherein, during variable speed 
reproduction, said recording/reproducing means 
(73-77) reproduces a variable-speed reproduction 
image defined by said digital broadcast signal. 

3. Apparatus according to claim 1 or claim 2, wherein 
said authorization/billing means (42, 43, 46) com- 
prises means for providing access to a plurality of 
management stations (44, 22) forming a billing sys- 
tem for processing billing information correspond- 
ing to predetermined services supplied by said dig- 
ital broadcast signal. 

4. Apparatus according to any one of the preceding 
claims, wherein said digital broadcast signal is a 
digital video signal. 

5. A digital signal transmission system comprising a 
receiving apparatus according to any one of the pre- 
ceding claims, an authorization center (44) as set 
forth in claim 1 , and a broadcasting station (30) op- 
erative to form a broadcast digital signal as set forth 
in claim 1 . 



Patentanspriiche 

1 . Digitale Signalempfangsvorrichtung (40; 60, 61 ) fur 
den Empfang eines digitalen Signals, welches von 
einer Sendestation (30) ausgesendet wird und wel- 
ches durch Komprimieren (33, 2) von ersten und 
zweiten digitalen Signalen (PS1, PS2), durch Ver- 
schlusseln (37) des komprimierten ersten digitalen 
Signals mit einem ersten Verschlusselungsschlus- 
sel, durch Multiplexverarbeitung (4) des verschlus- 
selten komprimierten ersten digitalen Signals und 
des komprimierten zweiten digitalen Signals und 
durch Verschlussein (5) der einer Multiplexverar- 
beitung unterzogenen ersten und zweiten digitalen 
Signale mit einem zweiten Verschlusselungs- 
schlussel gebildet ist, wobei die betreffende Emp- 
fangsvorrichtung (40; 61, 61) umfaRt: 

eine erste Entschlusselungseinrichtung (15; 
15, 19) zur Entschlusselung des genannten di- 



first-decryption means (15; 15, 19) for decrypt- 
ing said digital broadcast signal encrypted with 
said second encryption key; 50 

means for recording the first-decrypted digital 
broadcast signal, which remains encrypted with 
said first encryption key, on a recording medium 
(41); 55 

second-decryption means (46; 46, 91) for de- 
crypting the recorded first-decrypted digital 
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gitalen Sendesignals, welches mit dem ge- 
nannten zweiten Verschlusselungsschlussel 
verschlusselt ist, 

sine Einrichtung zur Aufzeichnung des ersten 
entschlusselten digitalen Sendesignals, wel- 5 
ches mit dem genannten ersten Verschlusse- 
lungsschlussel verschlusselt bleibt, auf einem 
Aufzeichnungstrager (41), 
eine zweite Entschlusselungseinrichtung (46; 
46, 91 ) zur Entschlusselung des aufgezeichne- io 
ten ersten entschlusselten digitalen Sendesi- 
gnals, welches mit dem genannten ersten Ver- 
schlusselungsschlussel verschlusselt ist, 
und eine Autorisierungs-ZAbrechnungseinrich- 
tung (42,43,46), die derart betrieben ist, dass 15 
eine Kommunikation mit einer Autorisierungs- 
zentrale (44) erfolgt zur Autorisierung der ge- 
nannten Entschlusselung durch die genannte 
zweite Entschlusselungseinrichtung in dem 
Fall, dass ein Benutzer eine solche Entschlus- 20 
selung wunscht, und um die Abrechnungsver- 
arbeitung fur eine derartige vorzunehmende 
Entschlusselung zu bewirken. 

2. Vorrichtung nach Anspruch 1, wobei die genannte 25 
Einrichtung zur Aufzeichnung des ersten entschlus- 
selten digitalen Sendesignals eine Aufzeichnungs-/ 
Wiedergabeeinrichtung (73-77) aufweist und wobei 
wahrend einer Wiedergabe mitvariabler Geschwin- 
digkeit die betreffende Aufzeichnungs-ZWiederga- 30 
beeinrichtung (73-77) ein durch das genannte digi- 
tale Sendesignal bestimmtes Wiedergabebild mit 
variabler Geschwindigkeit wiedergibt. 

3. Vorrichtung nach Anspruch 1 oder 2, wobei die ge- 35 
nannte Autorisierungs-ZAbrechnungseinrichtung 
(42, 43, 46) eine Einrichtung umfaBt fur die Vornah- 

me eines Zugriffs auf eine Vielzahl von Verwal- 
tungs- bzw. Managementstationen (44, 22), die ein 
Abrechnungssystem bilden, zur Verarbeitung der 40 
Abrechnungsinformation entsprechend bestimm- 
ten Diensten, die durch das genannte digitale Sen- 
designal bereitgestellt bzw. geliefert werden. 

4. Vorrichtung nach irgendeinem der vorhergehenden ^5 
Anspruche, wobei das genannte digitale Sendesi- 
gnal ein digitales Videosignal ist. 

5. Digitales Signalubertragungssystem, umfassend 
eine Empfangsvorrichtung nach irgendeinem der 50 
vorhergehenden Anspruche, eine Autorisierungs- 
zentrale (44), wie sie im Anspruch 1 angegeben ist, 
und eine Sendestation (30), die derart betrieben ist, 
dass ein digitales Sendesignal gebildet wird, wie es 

im Anspruch 1 angegeben ist. 55 



Revendications 

1 . Appareil de reception de signal numerique (40 ; 60, 
61) pour recevoir un signal numerique diffuse par 
une station de diffusion (30) et forme en comprimant 
(33, 2) des premier et second signaux numeriques 
(PS1, PS2), en cryptant (37) le premier signal nu- 
merique comprime a I'aide d'une premiere cle de 
cryptage, en multiplexant (4) le premier signal nu- 
merique comprime crypte et le second signal nume- 
rique comprime et en cryptant (5) les premier et se- 
cond signaux numeriques multiplexes a I'aide d'une 
seconde cle de cryptage, ledit appareil de reception 
(40 ; 60, 61) comprenant : 

un moyen de premier decryptage (15; 15, 19) 
pour decrypter ledit signal de diffusion numeri- 
que crypte a I'aide de ladite seconde cle de 
cryptage ; 

un moyen pour enregistrer le signal de diffusion 
numerique decrypte en premier, qui reste cryp- 
te a I'aide de ladite premiere cle de cryptage, 
sur un support d'enregistrement (41 ); 
un moyen de second decryptage (46 ; 46, 91) 
pour decrypter le signal de diffusion numerique 
decrypte en premier enregistre crypte a I'aide 
de ladite premiere cle de cryptage ; et 
un moyen d'autorisationZfacturation (42, 43, 46) 
qui fonctionne pour communiquer avec un cen- 
tre d'autorisation (44) pour autoriser ledit de- 
cryptage par ledit moyen de second decryptage 
lorsqu'un utilisateur souhaite un tel decryptage 
et pour provoquer la realisation d'un traitement 
de facturation pour ce decryptage. 

2. Appareil selon la revendication 1, dans lequel ledit 
moyen pour enregistrer le signal de diffusion nume- 
rique decrypte en premier comprend un moyen 
d'enregistrement/reproduction (73-77) et dans le- 
quel, pendant une reproduction a Vitesse variable, 
ledit moyen d'enregistrementZreproduction (73-77) 
reproduit une image de reproduction a Vitesse va- 
riable definie par ledit signal de diffusion numeri- 
que. 

3. Appareil selon la revendication 1 ou 2, dans lequel 
ledit moyen d'autorisationZfacturation (42, 43, 46) 
comprend un moyen pour assurer un acces a une 
pluralite de stations de gestion (44, 22) formant un 
systeme de facturation pour traiter une information 
de facturation correspondant a des services prede- 
termines fournis par ledit signal de diffusion nume- 
rique. 

4. Appareil selon I'une quelconque des revendications 
precedentes, dans lequel ledit signal de diffusion 
numerique est un signal video numerique. 
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Systeme de transmission de signal numerique com- 
prenant un appareil de reception selon I'une quel- 
conque des revendications precedentes, un centre 
d'autorisation (44) selon la revendication 1 et une 
station de diffusion (30) fonctionnant pour former un 5 
signal numerique de diffusion selon la revendication 
1. 
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